Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability."

According to the version number obtained by NTLM the remote host has Windows Server 2008 installed. The host may be vulnerable to a number of vulnerabilities including remote unauthenticated code execution.

The remote host contains a memory corruption vulnerability in the 'Server' service that may allow an attacker to perform a denial of service against the remote host.

ID	Name	Product	Family	Type	Severity
108811	Windows Server 2008 Critical RCE Vulnerabilities (uncredentialed) (PCI/DSS)	Nessus	Windows	Remote	critical
34408	MS08-063: Microsoft Windows SMB File Name Handling Remote Underflow (957095)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2008-4038

critical

Tenable Plugins

critical

high